If this is your first visit, be sure to
check out the Forum Rules by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Ettercap script that workt in BT4 is not getting passwords in BT5

Hi everybody,

In BT4 I had a script to capture passwords with ettercap and sslstrip, this worked fine. But now in BT5 ettercap is not finding the passwords. When I look with wireshark to the pcap file, I can find the passwords in here (https). I searched this forum and google, also tried to reinstall ettercap with the fix so its not crashing anymore, but no luck. Is there someone with the same problem and has a fix?

Re: Ettercap script that workt in BT4 is not getting passwords in BT5

Are you sure that sslstrip is running? When BT5 is first installed, sslstrip won't run with the command "sslstrip". You could do something like "python /pentest/web/sslstrip/sslstrip.py". My preference is to install sslstrip:
cd /pentest/web/sslstrip
python setup.py install

Once the install is done the sslstrip command will work by itself. Also consider updating to sslstrip 0.9. It was released a few days ago and looks like it corrects a few problems including catching gmail logins, which is where I usually do my testing from.

Re: Ettercap script that workt in BT4 is not getting passwords in BT5

All,

I have updated easy-creds to run on BT5. Mostly path changes, installation of hamster/ferret & dhchp3-server. It's all in the readme file.

In addition I fixed the IP assignments for FakeAP. Yes, I *really* fixed it this time. Who knew you couldn't have a dhcp config file outside of /etc? I didn't and finally saw the permission denied when trying to run it. Set it to 777, didn't work so I just have the script write a dhcp-ec.conf file in the proper folder and everything is good.